Memory corruption in Microsoft Internet Explorer - CVE-2010-3971

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to boundary error when parsing CSS styles. A remote attacker can create a specially crafted web page containing Cascading Style Sheet that refers to itself recursively, cause memory corruption and execute arbitrary code on the target system with privileges of the current user.

Successful exploitation of this vulnerability may allow an attacker to compromise vulnerable system.

Note: this vulnerability is being actively exploited.

Affected software

How to mitigate CVE-2010-3971

Links to Public Exploits and PoC-codes

• Exploit #988 - Microsoft Internet Explorer - CSS Recursive Import Use-After-Free (MS11-003) (Metasploit) (March 18, 2020)
• Exploit #989 - Microsoft Internet Explorer 8 - CSS Parser Exploit (March 18, 2020)
• Exploit #990 - Microsoft Internet Explorer 8 - CSS Parser Denial of Service (March 18, 2020)
• Exploit #1670 - MS11-003 Microsoft Internet Explorer CSS Recursive Import Use After Free (March 18, 2020)

External References

• https://technet.microsoft.com/en-us/library/security/2488013
• https://technet.microsoft.com/en-us/library/security/ms11-003

Related Security Bulletins

• Remote code execution in Microsoft Internet Explorer